python server should run as user/group www-data ?

[Jérémy Lal <jerry@edagames.com>]

I'm packaging Orbited [0]
and set up init.d script.
Orbited server can change its uid/gid
but i wonder if it should be
www-data:www-data, which, if compromised,
could give access to web server files, which
is not very secure. Or, as i first did it,
as a Debian-orbited system user. In which case
i wonder to which group /var/run and /var/log
should belong.
Any idea ?

[0]
http://orbited.org